Systems and methods for revoking digital signatures

A system for revoking digital signatures, the system comprising:

• an identification module programmed to:
• identify an executable file signed with a digital signature;
• determine that the executable file is subject to a revocation check, wherein the revocation check determines whether the digital signature has been revoked;
• a classification module programmed to:
• classify the executable file based on at least one attribute of the executable file;
• determine, based on the classification of the executable file, that the executable file is a member of a revocation group, wherein a status identifier of the revocation group indicates whether any member of the revocation group has a digital signature revocation;
• a determination module programmed to determine that the status identifier of the revocation group indicates that at least one member of the revocation group has a digital signature revocation;
• a checking module programmed to perform, based at least in part on determining that the status identifier of the revocation group indicates that at least one member of the revocation group has a digital signature revocation, the revocation check on the executable file;
• at least one processor configured to execute the identification module, the classification module, the determination module, and the checking module.

A non-transitory computer-readable-storage medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• identify an executable file signed with a digital signature;
• determine that the executable file is subject to a revocation check, wherein the revocation check determines whether the digital signature has been revoked;
• classify the executable file based on at least one attribute of the executable file;
• determine, based on the classification of the executable file, that the executable file is a member of a revocation group, wherein a status identifier of the revocation group indicates whether any member of the revocation group has a digital signature revocation;
• determine that the status identifier of the revocation group indicates that at least one member of the revocation group has a digital signature revocation;
• perform, based at least in part on determining that the status identifier of the revocation group indicates that at least one member of the revocation group has a digital signature revocation, the revocation check on the executable file.